npm @lynox-ai/core @1.9.0
score
0.6081
med
flagged
2026-06-05 05:21
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| bin_added | 0.8 | new bin entry: ['lynox'] |
| script_count_spike | 0.5 | scripts count 0 -> 16 |
| topology | ||
| dependency_added_unknown | 0.6 | 12 new non-watchlisted dep(s): ['@anthropic-ai/sdk', '@huggingface/transformers', '@mozilla/readability', '@sentry/node', 'better-sqlite3'] ... |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"brandfusion"
],
"versions": 28
}
Evidence (package doc at flag time)
{
"dependencies_count": 12,
"dist": {
"integrity": "sha512-9eyFVZWoJUDEd0p8LClsiPqWjzWdJRgECWqSNv11EqtDRqWtUOLrXEkoZZsMa8+cdgXzsKQpKvv0EkeH2EUqVg==",
"tarball": "https://registry.npmjs.org/@lynox-ai/core/-/core-1.9.0.tgz",
"unpackedSize": 3360272
},
"dist-tags": {
"latest": "1.9.0"
},
"latest_version": "1.9.0",
"maintainers": [
{
"email": "rafael@brandfusion.ch",
"name": "brandfusion"
}
],
"num_versions": 43,
"repository": {
"type": "git",
"url": "git+https://github.com/lynox-ai/lynox.git"
},
"scripts": {
"bench": "vitest bench --config vitest.bench.config.ts",
"bench:online": "vitest bench --config vitest.bench.config.ts tests/performance/online/",
"build": "tsc",
"coverage": "vitest run --coverage",
"dev": "node --env-file-if-exists=.env --watch --import tsx src/index.ts",
"lint": "eslint src/",
"postinstall": "node -e \"const f='scripts/postinstall.cjs';require('node:fs').existsSync(f)&&require('node:child_process').spawnSync(process.execPath,[f],{stdio:'inherit'})\"",
"prepack": "find dist -name '*.js.map' -o -name '*.d.ts.map' | xargs rm -f",
"prepare": "lefthook install || true",
"prepublishOnly": "npm run build",
"security": "sh scripts/security-scan.sh && vitest run tests/security/",
"smoke:local": "bash scripts/smoke-local.sh",
"start": "node dist/index.js",
"test": "vitest run",
"test:watch": "vitest",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"bin_added": "new bin entry: ['lynox']",
"dependency_added_unknown": "12 new non-watchlisted dep(s): ['@anthropic-ai/sdk', '@huggingface/transformers', '@mozilla/readability', '@sentry/node', 'better-sqlite3'] ...",
"install_script_payload": "install/lifecycle script matches payload regex",
"script_count_spike": "scripts count 0 -> 16"
},
"time": {
"created": "2026-04-09T16:28:41.020Z",
"modified": "2026-06-04T18:06:32.257Z"
}
}